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Abstract 

We work out the phase-space structure for a system of n qubits. We replace the field of real numbers that 
label the axes of the continuous phase space by the finite field GF(2 n ) and investigate the geometrical 
structures compatible with the notion of unbiasedness. These consist of bundles of discrete curves inter- 
secting only at the origin and satisfying certain additional properties. We provide a simple classification 
of such curves and study in detail the four- and eight-dimensional cases, analyzing also the effect of lo- 
cal transformations. In this way, we provide a comprehensive phase-space approach to the construction of 
mutually unbiased bases for n qubits. 
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1. Introduction 



Quantum mechanics describes physical systems through the density operator g. For continuous 
systems, this operator lives in an infinite-dimensional complex Hilbert space and its relations 
with the physical properties of the system are far from obvious. To overcome these conceptual 
difficulties, a number of phase-space methods have been devised, which result in a striking formal 
similarity with classical mechanics [1]. 
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Textbook examples of this subject are usually presented in terms of continuous variables, 
typically position and momentum. However, there are many quantum systems that can be appro- 
priately described in a finite-dimensional Hilbert space. These include, among other, spins, mul- 
tilevel atoms, optical fields with a fixed number of photons, electrons or molecules with a finite 
number of sites, etc. An elegant way of approaching these systems was proposed by Weyl [2] in 
his description of quantum kinematics as an Abelian group of ray rotations. Similar results were 
also obtained by Schwinger [3-5], who showed that a set of unitary operators (defined through 
cyclic permutations of state vectors) can be constructed such that they are the generators of a 
complete operator basis, in terms of which all possible quantities related to the physical system 
can be built. 

The structure of the phase space associated to a d-dimensional system (a qudit, in the mod- 
ern parlance of quantum information) has been addressed by a number of authors. A possible 
approach was taken by Hannay and Berry [6], considering a grid constrained to admit only pe- 
riodic probability distributions, which implies that it is effectively a 2d x 2d-dimensional torus. 
The same strategy was adopted by Leonhardt [7, 8] and used to deal with different aspects of 
quantum information [9-11]. This method offers a way for treating even-dimensional systems, 
since the grid has both integer and half-odd coordinates. 

However, the mainstream of research has focused on a phase space pictured as a d x d lattice. 
This line was started by Buot [12], who introduced a discrete Weyl transform that generates a 
Wigner function on the toroidal lattice (with d odd). More recently, these ideas have been 
developed further by other authors [13-24]. In particular, when the dimension is a power of a 
prime, one can label the points in the d x d grid with elements of the finite Galois field GF(d). 
At first sight, the use of elements of GF(c?) as coordinates could be seen as an unnecessary com- 
plication, but it turns out to be an essential step: only by doing this we can endow the phase space 
with similar geometrical properties as the ordinary plane. Note also that though the restriction 
to powers of primes rules out many quantum systems, this formulation is ideally suited for the 
outstanding case of n qubits we deal in this paper. 

In these finite descriptions, the Wigner function, being the Weyl representative of the density 
operator, naturally emerges as a function that takes values only at the points defining the dis- 
crete mesh of the phase space (while preserving some properties that make it a special object 
in quantum mechanics). A remarkable feature is that one can sum the Wigner function along 
different axes (including skew ones) to obtain correct probability distributions for observables 
associated with those axes. Although the axis observables cannot be complementary in the usual 
sense (their commutator cannot be proportional to the identity operator), they will have a closely 
related property: every eigenstate of either one of them is a state of maximum uncertainty with 
respect to the other. 

This makes a deep connection with the notion of mutually unbiased bases (MUBs) [25,26], 
which were introduced as a central tool for quantum state reconstruction [27]. They also play 
a relevant role in a proper understanding of complementarity [28-31], in cryptographic proto- 
cols [32, 33], and in quantum error correction codes [34, 35]. Recently, they have also found uses 
in quantum game theory, in particular to provide a convenient tool for solving the so-called mean 
king problem [36^-3]. 

It has been shown [44] that the maximum number of MUBs can be at most d + 1 . Actually, it is 
known that if d is prime or power of a prime the maximal number of MUBs can be achieved [45] . 
Different explicit constructions of MUBs in prime power dimensions have been suggested in a 
number of recent papers [46-53]. Remarkably though, there is no known answer for any other 
values of d, although there are some attempts to find a solution in some simple cases, such as d = 
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6 or when d is a nonprime integer squared [54-57]. Recent work has suggested that the answer 
to this question may well be related with the nonexistence of finite projective planes of certain 
orders [58, 59] or with the problem of mutually orthogonal Latin squares in combinatorics [60, 
61]. 

The construction of MUBs is closely related to the possibility of finding d + 1 disjoint classes, 
each one having d — 1 commuting operators [which proves useful to arrange in a table with 
(d— 1) x (d+1) entries], so the corresponding eigenstates form sets of MUBs [62]. Nevertheless, 
these MUB operators can be organized in several different nontrivial tables, leading to different 
factorization properties of the MUB [63] . It has been recently noticed [64] that such arrangements 
are related with special types of curves. We have previously analyzed [65] those curves in the 
four-dimensional case (corresponding to two qubits) and have shown that they can be obtained 
through local transformations from rays (straight lines passing though the origin), so that the six 
possible 3x5 tables of operators lead to the same (and unique) factorization of the MUBs. 

In the present paper we go further and analyze the general situation of n qubits. In particular, 
we classify the admissible curves in specific bundles and show how the properties of these curves 
can be used to determine nontrivial sets of MUBs. 



2. Mutually unbiased bases and discrete phase space 

2.1. Constructing mutually unbiased bases in prime dimensions 

We start by considering a system living in a Hilbert space Hd, whose dimension d is assumed 
for now to be a prime number p. The different outcomes of a maximal test constitute an orthogo- 
nal basis of Hd [66]. One can also look for orthogonal bases that, in addition, are "as different as 
possible". This is the idea behind MUBs and can be formally stated as follows: two bases 
and are mutually unbiased when 

\( Ul \ Vj )\ 2 = i. (2.1) 

Unbiasedness also applies to measurements: two nondegenerate tests are mutually unbiased if the 
bases formed by their eigenstates are MUBs. Therefore, the measurements of the components of 
a spin 1/2 along x, y, and z axes are all unbiased. It is also obvious that for these finite quantum 
systems unbiasedness is tantamount of complementarity. 

It is useful to choose a computational basis \n) (n = 0, . . . , d — 1) in Hd and introduce the 
basic operators 

X\n) = \n+1), Z\n)=u n \n), (2.2) 

where w = cxp(2ni/d) is a dth root of the unity and addition and multiplication must be un- 
derstood modulo d. These operators X and Z, which are generalizations of the Pauli matrices, 
were studied long ago by Weyl [2] and have been used recently by many authors in a variety of 
applications [67,68]. They generate a group under multiplication known as the generalized Pauli 
group and obey 

ZX = luXZ, (2.3) 
which is the finite-dimensional version of the Weyl form of the commutation relations. 
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As anticipated in the Introduction, one can construct MUBs by finding d + 1 disjoint classes 
(each one having d — 1 commuting operators), such that the corresponding eigenstates form sets 
of MUBs. We follow the explicit construction in reference [52], which starts with the following 
sets of operators: 

{X fc }, {Z k X mk }, (2.4) 
with k = 1, . . . , d — 1 and m = 0, . . . , d — 1. One can easily check that 

Tr{X k X k '^) = d6 k ,v, Ti{Z k Z k '^) = d8 k , k ,, 

(2.5) 

Tv[(Z k X mk )(Z k 'x m ' k ')^} = d8 k>k ,8 m , m ,. 

These pairwise orthogonality relations indicate that, for every value of m, we generate a maximal 
set of d — 1 commuting operators and that all these classes are disjoint. In addition, the common 
eigenstates of each class m form different sets of MUBs. 

2.2. Mutually unbiased bases for n qubits 

When the space dimension d — p n is a power of a prime it is natural to view the system as 
composed of n constituents (particles), each of dimension p. We adapt the previous construc- 
tion to this case, although with an eye on the particular case of n qubits (in the Appendix we 
summarize the basic notions of finite fields needed for our purposes in this paper). 

The main idea consists in labeling the states with elements of the finite field GF(2 n ), instead of 
natural numbers. We denote by a), with a G GF(2"), an orthonormal basis in the Hilbert space 
of the system. Operationally, the elements of the basis can be labeled by powers of a primitive 
element, and the basis reads 

{|0), k),..., k 2 "- 1 - 1}}. (2.6) 

These vectors are eigenvectors of the operators Zp belonging to the generalized Pauli group, 
whose generators are now defined as 

z = J2 xM)HR x = l« + $H ( 2 - 7 ) 

a£GF(2") a£GF(2") 

so that 

Z a X fJ = X (af3)X fj Z a , (2.8) 



where \ is an additive character defined in (IA.51 . 

The operators (12.71 i can be factorized into tensor products of powers of single-particle Pauli 
operators a z and a x , whose expression in the standard basis of the two-dimensional Hilbert space 
is 

a z = |1}<1| - |0><0|, ct b = |0)(1| + |1)(0|. (2.9) 

This factorization can be carried out by mapping each element of GF(2") onto an ordered set of 
natural numbers as in equation ( IA.7b . A convenient choice for this is the selfdual basis, since the 
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finite Fourier transform factorizes then into a product of single-particle Fourier operators, which 
leads to 

Z a <g> Xp = a b x 1 ®...®a b x " (2.10) 

where (ai, . . . , a n ) and (61, ... , 6 n ) are the corresponding coefficients. 

The simplest geometrical structures in the discrete phase space are straight lines, i.e., collec- 
tions of points (a,/3) G GF(2") x GF(2") satisfying the relation 

(a + V [3 = tf, (2.11) 

where £, -q and d are fixed elements of GF(2"). Two lines 

Q a + rj(3 = ('a + rf p = 1?', (2.12) 

are parallel if they have no common points, which implies that r/(' = Qrj' . If the lines ( 12. 1 2b are 
not parallel they cross each other. A ray is a line passing through the origin, so its equation is 

a = 0, or P = \a, (2.13) 

or, in parametric form, 

a{n) — fin, — UK i (2-14) 

where k is the parameter running through the field. The rays are the simplest nonsingular (i.e., 
with no selfintersection) additive structures in phase space, in the sense that 

<*(« + «') = <*(«) + «(«'), P(k + k') = /3(k) +P(k'). (2.15) 

This means that by summing the coordinates of the origin and of any point in a ray we obtain 
another point on the same ray. In particular, this opens the possibility of introducing operators 
that generate "translations" along these rays [22]. 

The rays have a very remarkable property: the monomials Z a Xp (labeled by phase-space 
points) belonging to the same ray commute 

Z ai Xfj l = \ ai Z a2 Xfj 2= \ a2 = Z a2 Xfi 2= \ a2 Z ai Xj3 l —\ olll (2.16) 

and thus, have a common system of eigenvectors {IVva)}, with A, v € GF(2 n ): 

Z a Xx a \tpv,x) =exp(i£v,\)\ipv,\), (2.17) 

where A is fixed and exp(i£ v ,\) is the corresponding eigenvalue, so \ip v .o) = \v) are eigenstates 
of Z a (displacement operators labeled by the ray = 0, which we take as the horizontal axis). 
Indeed, we have that 

|(<M</V,A')| 2 = 5 x ,x'6 VlV , + ~(1 - 8 X ,\>), (2.18) 

a 

and, in consequence, they are MUBs [27]. Since each ray defines a set of 2™ — 1 commuting 
operators, if we introduce 2™ + 1 sets of commuting operators (which from now on will be called 
displacement operators) as 

{X p }, {Z a Xp =Xa }, (2.19) 

then we have a whole bundle of 2" + 1 rays (which is obtained by varying the "slope" A) that 
allows us to construct a complete set of MUB operators arranged in a (2™ — 1) x (2™ + 1) table. 
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We wish to emphasize that in our approach we do not assign a quantum state to each line in 
phase space (as in reference [22]), but rather we use them to label Pauli displacement operators. 



3. Curves in discrete phase space 

3.1. Additive curves and the commutativity condition 

The rays are not the only additive structures that exist in the discrete phase space. One can 
check that the parametric curves (passing through the origin) 

n— 1 n—1 

a(n)=*^2a m K 2 , 13{k) = ^2 f3 m k 2 , (3.1) 

tci— Tci— 

satisfy the condition ( 12.151 ) too. If we also require the displacement operators labeled with the 
points of ( 13. U to commute with each other, we must impose 

tr(ajS') = tr(a'j8), (3.2) 

where a' = a(n') and (3' = /?(«/). Then, the coefficients a m and (3 m fulfill the following 
restrictions (the indices must be understood modulus n) 

n—X n—1 

^ t a n—m Pn—m+q ^ t fin-m a n—m+q) 1 1, ... ,71 — 1. (3.3) 

m— tci— 

This can be rewritten in an invariant form by summing up all Frobenius automorphisms of (13.3b : 

tr(a m /3 fc ) = 0. (3.4) 

Whenever the condition d3.4t holds true, we can associate to each curve ( 13.11 ), with given coeffi- 
cients a = (a , a n _i) and (3 = (/3 , ■ ■ ■ , (3 n -i), a state \ip s j). 

The curves fulfilling equation ( 13.41 ) will be called additive commutative curves. When such a 
curve contains 2™ — 1 different points (apart from the origin), the monomials Z a Xp form also a 
set of commuting operators (as happened for the rays). 

In fact, consider a subset Z a /^X^^, such that 

[Za(,K)Xp(K)iZa(K')Xp(K')] =0: Tr (^a(K)^/3(K)^l( K ')^/3( K ')) =0) (3-5) 

for any k, k' G GF(p"), i.e. a disjoint set of d mutually commuting monomials, including 
Za(o)Xp(o) = ll. Then, the eigenstates of any two disjoint sets of these mutually commuting 
monomials form MUBs. 

To prove this important result, we first note that any set of commuting monomials can be 
obtained by applying Clifford operations U\ to the simplest set {Z K }: 

U x Z K Ut = <f>(\,K)Dx, K , (3.6) 

where cf>(A, k) is an unessential phase factor [<fi(A, 0) = 0(0, ft) = 1] and£>A,K = ^ C t(A,«)^' l S(A,«) 
fulfill 

[D X>K , D XtR ,} = 0, Tr(D x , K D{ k ,) = d5 K , K ,, (3.7) 
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since the transformations U\ are nondegenerate. For two disjoint set of commuting monomials 
{£>a,k} and {D\i jK i } we have then 

j. \ d5 K K i , A = A', 

Tr(D x , K D{ r>K ,) = ; ■ (3-8) 

[ dS^^S^'fi, A^A 

Let {\v)} be the basis of eigenstates of Z K . It is worth noting the following expansion 

\ v ) ( y l = \ E X("««)^« = ^ E (3-9) 

Now, if we define the states \tpv,\) — U\\v) and |Vv,A') — Uy\v'), where U\ is as in equa- 
tion J3.6t , then a direct calculation using (13. 9\ shows that ( |2.18t holds true for them and so they 
are indeed MUBs, as announced. 

Finding sets of MUBs can be thus reduced to the problem of arranging additive curves in 
2™ + 1 bundles of mutually nonintersecting curves. 

Due to the condition ( 12.151 ). points of a curve form a finitely generated Abelian group, which 
allows us to determine all the curve from any n points and, in particular, from the "first" n 
consecutive points. For instance, taking the parameter n polynomially ordered (that is, k = 
a, a 2 ,..., a 2 "- 1 ), we have that a(a k ) + a(cr fc+1 ) = a(a k + a k+1 ) = a[a k (l + a)} = 
a[a fe + i ( 1 )], where L(X) is the Jacobi logarithm [69]. Given a primitive polynomial, sometimes 
is possible to evaluate L(l) in a simple form. 

For GF(2 2 ) the only irreducible polynomial is x 2 + x + 1 = 0, and this immediately leads to 
L(l) = L(a 3 ) — 2, in such a way that a(a k ) + a(cr fe+1 ) = a(a k+2 ) and two points are enough 
to determine any additive curve. In the case of GF(2 3 ), if we use the irreducible polynomial 
x 3 + x + 1 = 0, we obtain that L(l) = L{a 7 ) = 3, so that a(a k ) + a(a k+1 ) = a{a k+3 ) and 
we need three points to generate the curve. 



3.2. Nonsingularity condition 



To classify all the additive commutative curves, we first discuss the condition of nonsingularity 
(i.e., nonselfintersection), which means that there are no n' ^ K such that 



a(n) = a(/v'), 



(3.10) 



If one of these equations would be fulfilled, then 6 m [e(n)] = (with e = a or fS) for m = 
0,...,n-l. 

Let us introduce the following matrix that will play a relevant role in our subsequent analysis: 



W F - = 







£2 


2 






n-1 


4 


el 


4 






n-1 


£ n-l 


4 



\ 



(3.11) 



V : : : :J 

where the rows are determined by the coefficients in ( 13. U and the corresponding expansions of 
& m [s(k)] (with s = a, (3 in our case). If det W,; and/or det do not vanish simultaneously, 
the curve (13. Il l has no selfintersection. 
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The condition 



detW 5 = detW /f = 0, (3.12) 

indicates that the ranks of the matrices W5 and are smaller than the dimension of the system, 
but it does not guarantee that there exist n' 7^ k satisfying (13.10b . because the solutions of 
a{n) = a(K') and (3(k") = /3(k"') can form disjoint sets. Consequently, (13.12b is necessary but 
not sufficient to determine if a curve is singular. Another necessary but not sufficient condition 
of singularity is det(W s + Wj) = 0. 

A curve that fulfills det W5 / and/or det 7^ will be called a regular curve. For such 
curves the coordinate a (when det W5 7^ 0) or (3 (when det VV^ / 0) take all the values in the 
field. 

Nonsingular curves satisfying (13.12b will be called exceptional curves. The conditions ( 13.12b 
mean that & m (a) and 6 ,n ((3) are not linearly independent (for m = 0, . . . ,n — 1), so neither 
a or (3 run through the whole field (in other words, the values of a and (3 are degenerate). The 
number of linearly independent powers of a (respectively (3) is equal to the rank of the matrix 
W,; (respectively W^) and the quantities n — rank W,; (respectively n — rank W^) determine 
the degree of degeneration of every allowed value of a (respectively (3). 

It is interesting to note that the determinant of the matrix (13. lib takes only the values zero and 
one; i.e., det W^- 6 Z2, which can be easily seen by observing that (det W,?) 2 = det Wf. 

4. Regular curves 

4. 1 . Explicit forms 

Given a regular curve, we can invert one of the relations (13.1b and, by substituting into the 
other one, we find an explicit equation of the curve. When det W5 / and det ^ 0, the 
coordinates a and (3 are nondegenerate and the curve can be written either as 



n-1 



>™a 2m ; (4.1) 



m=0 

or 

n-1 

a=^Vm/3 2m . (4.2) 

m=0 

However, when det Ws 7^ but det = 0, the coordinate (3 is degenerate and the curve cannot 
be expressed in the form ( 14.2b . We will refer to the corresponding curve as a-curve. Similarly, if 
det VV^ 7^ but det W5 = 0, the coordinate a is degenerate and the curve cannot be expressed 
in the form (14.1b : we will call it a /3-curve. 

4.2. Commutativity conditions 

The commutativity condition ( 13.4b can be further simplified for regular curves. When det W5 7^ 
(or det 7^ 0) we obtain, by direct substitution of the explicit forms (14.1b or (14.2b into (13.2b . 
the following restrictions on the coefficients 4> m (or ip m ) 
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<l>i =<&-,, i>i=^l-p i = l,...,[(n-l)/2], (4.3) 

where [ ] denotes the integer part. For even values of n, the additional requirements <fi n /2 = 
$n/2 (V'n/2 = V^/^) should be fulfilled, which basically implies that <f> n /2 (ipn/2) belong to the 
subfield GF(2™/ 2 ). 

Because the regular curves are nonsingular per definition, we do not have to carry out the 
whole analysis involving the parametric forms of curves and the properties of the corresponding 
W,; and Ws, but just to write down explicit expressions using directly (14.31 ). 

Two regular curves defined explicitly as (3 = f(a, 4>) and (3 = / (a, 4>'), with <p — (tfio, . . . , n _i) 
[or a — g(/3, ip) and a = g((3, tp'), with ip = (ipo, . . . , ^„_i)] are not mutually intersecting (ex- 
cept at the origin), if 

det(W ? + ) ± 0, det(W^ + W^, ) ^ 0, (4.4) 

for a- and /3-curves, respectively, and the matrices W have been defined in (13. lit . 

An a-curve (3 = f(a,(j>) intersects with a /3-curve a — g(/3,ip) when the polynomial (3 — 
f[g((3, ip), (/>] (or a = g[f(a, 4>),4>]) has at least one nonzero root. 

It follows from ( 14.41 ) that the regular curves 



n-l 



(3 = (j} a + (p m a z , (4.5) 



where <j> m (m = 1, . . . , n — 1) are fixed and fulfill (14.31) . and cf>o runs through the whole field, 
belong to a bundle of nonintersecting curves, since the matrices + W^, take now the diagonal 
form 



00 + ^0, (00 + 00 ) 



" 2 .,(0o + o ) 2 " 



(4.6) 



W^ + W^ = diag 
so that 

det(W - + W -,) = (0o + 0o) 2 " _1 , (4-7) 

and thus, dct(W^ + Ws) = 1 if 0o ^ <j>' Q . To complete the bundle to n + 1 curves we add the 
ray a = 0, which obviously has no common points with (14.5b . 
Similarly, the curves 

n-l 

a = ip f3 ^ ( 4 - 8 ) 

m— 1 

form bundles of nonintersecting curves, except that now we have to add the ray (3 = to complete 
the bundle. 



4.3. Examples 

4.3.1. Regular curve 

Let us consider the following parametric curve in GF(2 3 ) 

a = a 2 K + n 2 +a i K 4 , (3 = a 3 n + a 6 n 2 + ct 6 k 4 , (4.9) 
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where a is the primitive element. The associated matrices are 

/ a 3 a e a 6 \ 



to 2 1 o 4 \ 



a cr 4 1 



V 



/ 



„b „5 

a a a 



(4.10) 



\a 3 a 3 a 5 j 



I a" a 

One can check that det W5 = det W3 = 1, and the explicit forms of the curve are 

13 = a 6 a + cr 3 a 2 + a 5 a 4 , or a = a 6 f3 + a 3 f3 2 + a 5 (3 4 , 



(4.11) 



whose coefficients satisfy the condition ( 14.3b . The set of commuting operators corresponding to 
this curve is 



{ZfjeX^, Z a hX a H, Z a 4.X a 2, Z a X a , Z a 7X a 7, Z a 2X a i, Z a 3X a 3}. 



(4.12) 



The curve belongs to a bundle of nonintersecting curves defined, for instance, by (3 — <fioa 



a 3 a 2 + a 5 a 4 . 



4.3.2. a-curve 

To the parametric curve 

2 4 

a = a K , 
it corresponds the matrices 

/ a 2 \ 



= a K + n + an , 



ct 4 
cr 



( o 2 1 o\ 



W = 



a 2 a 4 1 



I a 4 a 



(4.13) 



(4.14) 



Now we have det Wg = 1 and det = 0, which leads to the following explicit form of the 
a-curve 



(4.15) 



whose coefficients satisfy again the condition (14.3b . The corresponding matrix is degenerate 
in this case. The set of commuting operators is 



{Z^S, Z cr 3X (J 2 1 Z^tX^, Z a iX a 2, Z a X a 3, Z a $X a 3, Z^I^s}, 

and the curve belongs to the bundle (3 = tpoa + er 5 a 2 + a 6 a 4 . 



(4.16) 



5. Exceptional curves 



The analysis of exceptional curves is considerably more involved. As we have stressed above, 
the points on the curve do not take all the values in the field and their admissible values are fixed 
by the structural equations 



E 

m=0 



v m a 



0, 



0. 



(5.1) 



m=0 
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where r a = rankW,; < n — 1 and rp = rankW^ < n — 1, which are a consequence of 
the linear dependence of a 2 and /3 2 . The coordinates a and /? of an exceptional curve are 
dega = 2 n ~ Ta and deg/3 = 2™ _r ' i, times degenerate, respectively. In other words, if (aj,/3j) 
is a point of an exceptional curve, for each aj there are 2™~ r < 3 values of (3, such that the points 
(otj,f3k) (k — 1, . . . , 2 n ~ r P) belong to the same curve and, conversely, for each (3j there are 
2"-i"t> values of a, such that the points ) also belong to the same curve. 

Due to the nonsingularity condition, there are 2™ different pairs of points (a, (3) belonging to 
the curve, so the condition r a + rp > n is satisfied. For instance, for GF(2 2 ) the only possibility 
is r a = rp = 1, and the only type of degeneration is dega = deg/3 = 2. For GF(2 3 ) there are 
three possibilities: r a — rp — 2 (dega = deg/3 = 2), r a = l,r@ = 2 (dega = 4, deg/3 = 2), 
and r a = 2, = 1 (deg a = 2, deg /? = 4). 

When a curve equation can be found [i.e., a relation of the type F(a) = G{0), where F(a) 
and G(0) are polynomials of degrees 2( r °~ 1 ) and 2^ r ' J_1 ^], it establishes a direct correspondence 
between the roots of ( 15. U . To define uniquely the curve, the equation F(a) = G(f3) should be 
supplemented with the structural equations. Nevertheless, such a relation exists only when the 
conditions r a p > (n + l)/2 hold. 

There are two ways of approaching the classification of exceptional curves. The first is a direct 
analysis of the parametric form ( 13.11 ) [whose coefficients satisfy the commutativity relation ( 13.41 ) 
and the corresponding determinants vanish]. We have to determine the rank of the matrices \Ng 
and Wj, find the structural relations ( 15. Q , and check the nonsingularity condition. The main 
difficulty with this approach is the complicated form of (13.4b . which is related to that fact that 
there is no one-to-one correspondence between the parametric form of a curve and points in 
the discrete phase space, in the sense that the same curve can be defined by several different 
parametric equations. 

We shall take an alternative route and construct all the possible exceptional curves by impos- 
ing ab initio the nonsingularity and commutativity conditions. An important ingredient in this 
construction is the existence of a priori information about the degree of degeneration in the a 
and /3 directions. We shall outline the main idea and study in detail only the eight-dimensional 
case. 

5.1 . Constructing exceptional curves 

Let us consider a nonsingular curve with degenerations 2 n ~ ra and 2™~ r < 3 along the a and 
axes, respectively. The structural equations iS.li can be represented as 

2 r «-l 2 r P—l 

a 11 (a + aj ) = 0, d [J (/J + &) = (), 

3=1 J=l 

with all the roots ctj and /3j different. Since only the powers a 2 and 1 (m 
can appear in ( 15.2b . we obtain the following restriction on the roots ctj and (3j 

5 fe (a i )=0, S k {(3j)=0, k^2 r ^-2 m 

where 

i 1 <i 2 <...<ijb 



(5.2) 

= 0, . . .,r a .p) 
(5.3) 
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are symmetrical functions of the roots. This restriction implies that only r a (rp) roots ay (0j) 
are linearly independent. 

Condition ( 13.21 ) implies that, given a degree of degeneration and once one of the structural 
equations is fixed, the other structural equation is not arbitrary. In other words, having determined 
the admissible points along one of the axis, all the admissible points of an additive commutative 
curve along the other axis are uniquely defined. 

The simplest situation corresponds to the case when degeneration along both axes is the same: 
dega = deg = g = 2 n ~ r (r > n/2), i.e., the ranks of the corresponding matrices ( 13.111 ) 
are r = r a = rp. Suppose that the structural equation for a is fixed. Then, the commutativity 
condition is equivalent to the following set of equations 

, , = 1, ... ,n — r, k = l,...,r, 
tr(a k &) = 0, {- (5.5) 

= 1, ...,r, k = 1, ...,n-r, 

where (ctk,0k) are linearly independent roots and the points (otj,0) and (O,0j), with j — 
1, . . . , 2 n ~ r , belong to the curve. 

Equations ( 15.5b mean that ( 15.2b can be always written as tr(a £) = 0, tr(/3 Q = 0, with £ and 
( being fixed elements of GF(2"). 

In the doubly degenerate case, g = 2, the value of j3\ is uniquely determined from the first 
condition in ( 15.51 ) and the curve can be represented as a disjoint union of two straight lines 

/3« = & a , 0^ = ^a + 1} (5.6) 
ai ai 

with a = ai, . . . , 0!2 r -i- It is worth noting that d5.5b in this case is just a structural equation, so 
that 

ft = ^ = |P, (5.7) 

where are the coefficients in d5.ll ) and S r are the symmetrical functions ( 15.3b of arguments 
a/c (fc = 1, . . . , 2 r — 1). Each different ordered set {ai, . . . , a r }, with a>j ^ a.k ^ determines 
thus an exceptional doubly degenerate curve. 

For higher degenerations, the curve is a disjoint union of g straight lines 

/3 (1) = Xa, (3 {2) = Xa + 0i, . .., /3 (s) = Xa + g -i, (5.8) 

where m (m = r + 1, . . . ,g — 1) are obtained as the possible different linear combinations of 
03 (j = !> ■ ■ ■ > r ) and 

A = — = ... = — . (5.9) 

The above ordering indicates that the points (a.j,0j) belong to the same straight line. Then, 
0k = 0\ak/oi-y (k = 2, . . . , r) and 0\ are uniquely expressed in terms of admissible values of 
ctj from ( 15.5b . which is convenient to rewrite in terms of the parameter A: tr(Aa:j at) =0, for 
j,k = 1, . . . , r. It is clear that the exceptional curves constructed using the equations ( 15.6b to 
( 15.8b are nonsingular. 

If the degeneration along a and axes are different (say, r a > rp), then the curves can be 
represented as a collection of nonintersecting "parallel" curves 

/3« = f(a), 0& = f(a) +5 U ..., 0^^ = /(«) + S 2n -r a _ 1} (5.10) 
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where f(a) is the function 



k=0 

and the commutativity condition leads to the restrictions tr(<5jay) = 0, which fix the values of 
St. 

The intersection problem can be studied using the same criterion as for the regular curves, 
taking into account that those conditions should be satisfied only at the admissible points of the 
curve. 



5.2. Examples 

5.2. 1 . Four-dimensional case 

In the case of GF(2 2 ) the only exceptional curves are doubly degenerate, r a = rp = 1. 
Besides, the structural equation is of second order: a(a + a\) = 0, so that any one of the three 
possible exceptional curves can be represented as a union of straight lines: 

= a - 2 a , (3 {2) = a^a + a^ 1 , (5.12) 

with a = 0, a%. More explicitly, for a given value of a>i we have the following curve: 

(0,0),(ai,ar 1 ),(0,aj; 1 ),(ai,0). (5.13) 

In this case it is impossible to write down an equation that relates a and f3. 
As an example, consider the curve 

(0,0),((7,a 3 ),(0,a 3 ),M) ) (5-14) 
where a% = a. The structural equations are then 

a 2 =aa, (3 2 = a 2 (3. (5.15) 

The implication of the curve type on the factorization of the basis will be discussed in section [7] 

5.2.2. Eight- dimensional case 

Two types of exceptional curves exist in the case of GF(2 3 ): (i) doubly degenerate in both 
directions, which corresponds to r a = r@ = 2; (ii) doubly degenerate in one direction and 
quadruply degenerate in the other, which corresponds to r a = 2,rp = 1 or r a = 1, rp = 2. 

In the case (i), any exceptional curve can be represented as a union of two lines 

= fca^a, li {2) = f3 1 (a^ 1 a+ 1), (5.16) 

where, according to equation ( 15.71 ). 

0i= 1 + — + — , (5.17) 

Oil + 012 Ct\ Oi2 

and the admissible values of a are 0, a±, ol%, and a% + a^. For a fixed set {a±, 0:2} the following 
exceptional curve is defined 
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(0,0), (ai,0), (ai,/3i), (a 2 ,/3i(a 1 1 a 2 + 1)), (a 2 ,f3 1 a 1 1 a 2 ), 

( ai + a 2 ,(3 1 a^ 1 a 2 ),(a 1 + a 2 ,p 1 {a^ 1 a 2 + l)),(0,/3i). (5.18) 

From the above equation we find that there are 21 exceptional curves due to the permutational 
symmetry between a 2 and a.\ + a 2 . 
As an example, consider 

(0, 0), {a\ 0), (a 4 , a 5 ), (a 3 , a 7 ), (a 3 , a 4 ), (a 6 , a 4 ), (a 6 , a 7 ), (0, a 5 ), (5.19) 
where a\ — <r 4 , a2 = c 3 . The structural equations are 

a 6 a + a 4 a 2 + a 4 = 0, cr 2 /3 + cr 6 /? 2 + /3 4 = 0, (5.20) 
and the curve has the form 

P 2 +a 5 /3 = a 6 a + a 2 a 2 . (5.21) 

In the case (ii), one of coordinates (say, for instance, a) is still doubly degenerate, while the 
other one is quadruply degenerate. Then, the coordinate (3 takes only two values: and S, while 
the allowed values of a are 0, a\, a 2 , and ol\ + a 2 , so such a curve has the form 

/?«=/(«), pW=f(a)+5, (5.22) 

where 

f(a) = - 6 (a.a + a 2 ), (5.23) 
a 2 (ai + a 2 ) 

and 5 satisfies tr(5 011,2) = 0, which leads to S = 
Explicitly, the points of such a curve are 

(0, 0), (ai, 0), (a 2 , 0), ( ai + a 2 , 0), <5), (a 2) <5), (ai + a 2 , J), (0, 5), (5.24) 

so there are seven different curves of this type due to permutational symmetry between a\, a 2 , 
and a\ + a 2 . 

As an example of such a degenerate curve, consider the points 

(0, 0), (a 3 , 0), (a 5 , 0), (a 2 , 0), (a 3 , a 6 ), (a 5 , a 6 ), (a 2 , a 6 ), (0, a 6 ), (5.25) 
where a.\ = er 3 , a 2 = c 5 . The corresponding structural equations are 

a 3 a + a 2 a 2 + a 4 = 0, cr 6 /3 + /3 2 = 0. (5.26) 



6. Local transformations 



Local transformations induce nontrivial transformations in the curve, although they preserve 
the factorization properties (in a given basis). We recall that in any selfdual basis we can represent 
the monomial Z a Xp in the following way 

n n 

Z a X fj = ® H a*jcj h x i = ® H( aj , bj), (6.1) 

3=1 3=1 
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where <S> Y[j denotes the tensor product over the index j. Under local transformations (rotations 
of angle ir/2 around z, x, and y axes, which we call z-, x- and y-rotations) applied to the jth 
particle, it transforms as 



z:(aj,bj) m> (aj + bj,^), 
x: {a 3 ,b 3 ) i f (ajibj + aj), 



(6.2) 



V ■ i a J, b j) ( a 3 + a j + b h b ] + a 3 + b j) = ( b Ji a j)- 

To give a concrete example, suppose we consider a z-rotation. The operator a z , corresponding 
to (a.,- = l,bj = 0), is transformed into (cij = 1 + = 1, bj =0); i.e., into itself, while the 
operator a x , corresponding to (a,j = 0, bj = 1), is mapped onto (a,j = + 1 = l,bj = 1), which 
coincides with a y . In the same way a y is mapped onto a x , while the identity (<Zj = 0, bj = 0) is 
mapped onto itself. 

In terms of the field elements it is equivalent to 



where is the selfdual basis. 

These transformations are nonlinear in the field elements: starting with a standard set of MUB 
operators related to rays, we obtain another set of MUB operators parametrized with points 
of curves, but leading to the same factorization structure. Indeed, consider a ray as in equa- 
tion (12.141 >. Then, under z-, x-, and y-rotations we have 





(6.3) 




k 





n-1 




m=0 
n-1 



k 
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Table 1 

Curves generated by applying the rotations indicated in the left column to the ray f) = in the case of two qubits. 



Rotation 


Curves 




x ® ll 


/3 = o-Q + a 2 , /3 2 =<t 2 /3 




y® ll 


C-/3 + /3 2 =cr 2 a + a 2 , a 2 = 


a 2 a, (3 2 = a S3 


ll (gia; 


(3 = a 2 a + a 2 , (3 2 = a(3 




ll ® y 


a 2 /3 + f3 2 = act + a 2 , a 2 = 


era, [3 2 = a 2 !3 


X ® X 


(3 = a 




y®y 


(3 = a 2 a + a 2 , (3 2 = af3 




X ® 1/ 


a(3 + a 2 f3 2 =a + a 2 a 2 , a 2 


= era, (3 2 = cr/3 


y ® x 


a = af3 + f3 2 , a 2 = a 2 a 





Note that the z- and x-rotations produce regular curves 

n-1 

z : a = plv- x (5 ^ oi = ^ + tfT +l > 

m— k 

(6.5) 

n-1 

x : (3 = n^ua = yr x voi + ^ a 2 "* ^ 6>f +1 . 

m— k 

Meanwhile, the y-rotation may lead to exceptional curves. In this case we always have k = 
(/i + v)^ 1 (a + (3), and thus the explicit equation of that curve is either 

n-1 

ni— k 

or 

n-1 

m— fc 

For instance, in the two-qubit case, starting from the ray /3 = 0, we can generate all the curves 
shown in table Q] In particular, it can be proven that in there are only two equivalence classes of 
curves [65]. 

7. Factorization structure and curve bundles 

In this section we discuss bundles leading to MUBs with different factorization structures. As 
we have stated before, given a basis in the field, any operator, labeled by a point of a curve, is 
factorized into a product of one-particle Pauli operators. For qubit systems the selfdual is the 
most appropriate, for the Fourier operator is factorized, and thus, the factorization of Z a and X a 
is straightforward. Now, let us divide each monomial Z a Xp, into two parts, so that the first part 
contains k Pauli operators and the second part n — k operators. If any first "block" of the set 
of d — 1 commuting generalized Pauli operators commutes with all the other "blocks", we will 
say that the corresponding curve is factorized into two sets. Obviously, the second blocks would 
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then also commute between them. Moreover, inside the first or second blocks may exist some 
"sub-blocks" that commute with corresponding sub-blocks, etc. In the end, we can represent any 
curve r G GF(2") in the following factorized form: 

r = {mi, ni2, ■ ■ ■ , win}, < mi < TO2 < ... < mj\r, 771$ = n, (7.1) 

i 

where to, 6 N is the number of particles in the i-th block that cannot be factorized anymore. 
It is clear that {mi, mi, ■ ■ ■ , mjy} is just a partition of the integer n, so the maximum number 
of terms is n, which corresponds to a completely factorized curve, T = {1,1, . . . , 1}, and the 

n 

minimum number of terms is one, corresponding to a completely nonfactorized curve, T = {n}. 

One can construct bundles that contain only regular curves, as it was shown in section [4] 
A systematic construction of bundles containing both regular and exceptional curves is a more 
involved task, which can be carried out numerically for low dimensions. 

As an example, consider the ray (3 = over GF(2 2 ), so the corresponding set of operators 
is {Z a , Z a 2, Z a 3}. In the selfdual basis (a, a 2 ) this set is factorized into (a z ll, \\a z ,a z a z ). 
Then, the curve (3 — is represented as T = {1,1}, i.e., both particles are factorized. The ray 
(3 = <ra, whose points label the set {Z a X a i , Z a iX a s , Z a 3X a }, has the following factorization 
(<j z a x , <J x &y: cr y a z ), so that it can be represented as T = {2}, which means that there are no 
factorized blocks. In the case of three qubits the possible partitions are {1, 1, 1} (e.g., the ray 
(3 = 0), {1, 2} (e.g., the regular curve [3 = cr e a 2 + er 3 a 4 ), and {3} (e.g., the ray (3 = a 3 a). 

The representation d7.U is invariant under local transformations. The corresponding basis pre- 
serves the factorization of the operator set, and local transformations preserve the factorization 
structure of the curve. This means that all the completely factorized curves can be obtained from 
a single factorized ray, say (3 = 0. Nevertheless, the curves with the same factorization struc- 
ture are not necessarily equivalent under local transformations (except in the trivial two-qubit 
case [65]). 

A bundle may contain curves with different factorizations. We can characterize different bun- 
dles with a set of numbers that indicate the number of completely factorized curves ({1,1,. ...1} 

n 

structure), completely factorized except a single two-particle block (curve of the type {1, 1, . . . , 1, 2}), 

n-2 

etc., until completely nonfactorized curves {n}. In other words, we assign to the bundle the set 
of numbers 

(ki,k 2 ,...,k p(n) ), Y^k j =2 n + 1, (7.2) 

3 

which indicate the number of curves factorized in n one-dimensional blocks, k\ ; the number of 
curves factorized in n — 2 one-dimensional blocks and one two-dimensional block, &2, etc, and 
p(n) is the number of partitions of an integer n. 

7.1. Curves over GF(2 2 ) 

As we have discussed, an additive commutative curve over GF(2 2 ) can be expressed as 

a{n) — aoK + a\K 2 , f3(n) = /3qk + [3iK 2 , (7.3) 
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where the commutativity condition ( 13.3b impose the following restrictions on the coefficients ctj 

and (3j 

aiA, + (ai/?o) 2 = a f3 1 + (a (3 1 ) 2 . (7.4) 

In this simple case, the whole analysis can be carried out from the parametric form. Nevertheless, 
it is more convenient to separate types of curves on regular and exceptional, according to our 
discussion in sections |4]and[5] 

All the possible additive commutative structures can be divided into two types: 

a) 12 regular curves, which can be constructed according to the general rule (14.31 >. among 
which there are four rays 

I3 = \a, a = 0, (7.5) 

and 8 curves 

a— curves : (3 = rja + a 2 , (3— curves : a = -q[3 + 2 . (7.6) 

b) 3 exceptional curves that can be represented as a union of two parallel lines ( 15.12b or in the 
parametric form 

a = /j,(k+ k 2 ), (3 = \i 2 {ok + a 2 K 2 ). (7.7) 

Every point of these exceptional curves is doubly degenerate and the admissible values of a and 
(3 are {0, fi} and {0, /i 2 }, respectively. 

It is important to stress that it is possible to obtain all the curves of form (17.5b , (17.6b . and 
(17.7b from the rays after some (nonlinear) operations, corresponding to local transformations of 
operators [65]. The families of such transformations are the following: 8 curves (the rays (3 — a 
and f3 = among them) can be obtained from the single ray a = (corresponding to the vertical 
axis) and the other 5 curves (the ray (3 — a 2 a among them) from the ray (3 — a a. 

The simplest curve bundle contains just rays. There are three rays (f3 = a, f3 = 0, and a — 
0) with completely factorizable structure {1,1} and two rays {(3 — a a and (3 = a 2 a with 
nonfactorizable structure {2}. Since any other bundle can be obtained from the ray bundle by 
applying some local transformations, the only bundle structure is (3, 2), i.e., in any bundle there 
are three factorizable curves and two nonfactorizable (having EPR-states as basis states). 

7.2. Curves over GF(2 3 ) 

A generic additive commutative curve over GF(2 3 ) is given by 

a = ctQK + a\K 2 + «2« 4 ) (3 = (3qk + f3\n 2 + /?2ft 4 . (7.8) 

The commutative condition in this case is much more complicated than for GF(2 2 ), so a full 
analysis of all the possible curves becomes cumbersome if we start with (17.8b . Instead, we can 
follow the procedure of sections |4] and [5] 

A generic regular curves has always one of the following forms 

(3 = (f) a + <j) 2 a 2 +(j)a A , a = iJj q (3 + ijj 2 (3 2 + ijj[3 4 . (7.9) 

for a- and /3-curves, respectively. All in all, we get 100 different regular curves. There are 21 
doubly degenerate exceptional curves of the form (15.18b and 14 exceptional curves ( 15.24b . which 
are quadruply degenerate in one direction and doubly degenerate in the other. 
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The simplest way of forming bundles of commutative curves is given in ( 14.51 l. Then, four 
bundles of nine curves each 



f3 = (j) a + (j) z a z + 0a 4 , a = 0, (7.10) 

where 0o € GF(2 3 ) and tr(0) = 0, have the factorization structure (3, 0, 6). The choice = 
leads to the ray structure ( 12.131 ). Among them, only three rays (/3 = 0, a = 0, /3 = a) have the 
structure {1,1,1}, while the other six rays have the structure {3}. 

All the other bundles with tr(0) = (i.e., takes the values a, a 2 , and a 4 ) can be generated 
from the bundle with = by applying local transformations. In particular, = a is generated 
by an x-rotation of the first qubit, = a 1 by an x-rotation of the second qubit, and — a 4 by 
an a>rotation of the first and second qubits. 

Another four bundles of nine curves 

(3 = (j) a + cf) 2 a 2 + <f)a 4 , a = 0, (7.11) 

where 0o € GF(2 3 ) and tr(0) = 1 generate all the structures (1,6,2). For instance, in the 
bundle with 0=1 the curves with 0o = 0, a 1 = 1 have the factorization {3} and all the other 
values of 0o G GF(2 3 ) generate the curves with the factorization {1, 2}. The ray a = has the 
factorization {1,1,1}. 

As in the previous case, all the bundles with tr(0) = 1 (0 = o" 3 , a 5 , a 6 ) can be obtained form 
the bundle with <f> — 1 by some local transformations: cj) = er 3 by an x-rotation of the first qubit, 
4> — <7 6 by an a; -rotation of the second qubit and <f> — a 5 by an a; -rotation of the third qubits. 

The aforementioned local rotations can be also viewed as a relabeling of the points of the 
curves (3 = 4>oa + a 2 + a 4 according to a i— > a k a and (3 i— > a~ k (3, with k = 2,4, 1, respectively. 
On the other hand, k = 3,5,6 correspond to nonlocal transformations and lead to the bundles of 
curves corresponding to the (3, 0, 6) structure. 

It is possible to obtain one more type of bundles with different factorization structure and con- 
stituted only by regular curves. To this end we recall that the nonintersection condition between 
two regular curves has the form 

(0 O + O ) 7 + tr[(0 o + O )(0 + 0')] = 1, (7-12) 

so 0o and O never coincide. Now, let us take three nonintersecting regular curves satisfying 
(El 

tr[(0 o + o )(0 + 0')]=O, 
tr[(0 o + o ')(0' + 0")]=O, (7.13) 
tr[(0o + o ')(0 + 0")]=O, 

and construct a set of curves according to 

= (€ + <&)<* + + ^) 2 " 2 + (<T + <^> 4 ' ( 7 - 14 ) 

where 0q , 0g and 0°, h are coefficients of the previously defined curves. In this way we generate 
five additional new curves: 

13 = (0o + 0> + (0 + 0')W + (0 + > 4 , 
(3 = (0o + O > + (0 + 0") 2 « 2 + (0 + 0'V, 
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/?=(<#,+ + (<f>' + cb") 2 a 2 + (<f>> + 0> 4 , 

13 = (0o + 4>' Q + tfo)a + (0 + cj}' + cj)") 2 a 2 + (0 + 0' + 0")a 4 , 

= 0, 



(7.15) 



and one has to add the last curve a = to complete the set of nine curves. 

We observe that the three "initial" curves can be obtained in the same way using some of the 
curves in ( 17.151 ). This implies that any curve constructed in this way should satisfy the condition 



tr 



0. 



(7.16) 



All these sets of curves lead to the factorization structure (2, 3, 4). One example of such type of 
bundle is 



{1,1,1} 
{1,2} 



{3} 



a = 0,/3 = 

[3 = a 6 a + a 3 a 2 
(3 = a 2 a + a 5 a 2 
(3 = <j 4 a + a 3 a 2 
(3 = <r 3 a, 
(3 = <j 5 a + a 5 a 2 
(3 = aa + a 2 a 2 -f 

2„2 



a 5 a 4 , 



a 6 a 4 , 



a 5 a 4 



a 6 a 4 , 



(7.17) 



4 

aa , 



(3 = a + C Ot + era 



There is one more type of bundles with the structure (0, 9, 0), i.e., which contains only curves 
with the factorization {1, 2}. Such bundles always contain exceptional curves. One example of 
those bundles is 

a) Regular curves 



a = a 2 [3 + a 3 f3 2 + a 5 (3 4 
[3 = <j 2 a + a 3 a 2 + cr 5 a 4 
a = [3 + a e {3 2 + ct 3 /3 4 , 
a = a 3 [3 2 + a 5 (3\ 

b) Exceptional curves 

(3 2 + a 5 /3 = a 2 a 2 + a e a, 

(3 2 + a 2 (3 = a 6 a 2 + a 5 a, 



a= <7 6 f3 + a 3 f3 2 + ct 5 /? 4 , 
S3 = a e a 2 
13 = a + a 3 a 2 



a 3 a\ 



a 5 a\ 



(7.18) 



tr(a 4 /3) = 0, tr(cr 5 a) = 0; 



tr(a 6 [3) = 0, tr(cr 2 a) = 0, 



(7.19) 



where the structural equations are written in the trace form. 

The rays with {1,2} factorization structure cannot be obtained from rays by local transforma- 
tions. Moreover, not all the curves with factorization {3} can be obtained from the rays of the 
same type. 
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All these structures can be obtained form each other by nonlocal transformations, which can 
be always reduced to a combination of CNOT gates and local transformations. To each bundle 
with a given factorization structure corresponds a set of nonlocal transformations preserving such 
structure. Such a symmetry can be used to determine the optimum tomographic procedure and 
will be discussed elsewhere. 

The phase-space approach presented here also provides an alternative to the graph-state clas- 
sification of all the possible stabilizers states for rt-qubit systems. In fact, each additive curve 
represents a basis in the 2" dimensional Hilbert space, so that the stabilizer state is one ele- 
ment of such basis. Not each curve can be directly associated with a graph state [70], but it can 
be reduced to an appropriate graph state through local Clifford transformations [71]. While the 
classification of the graph states represents a formidable task for large numbers of qubits, the 
phase-space approach allows working with algebraic structures. Although the local equivalence 
is still an open problem, at least we can determine some elements of equivalence classes under 
local Clifford transformations in a relatively simple form. Besides, several nonlocal qubit oper- 
ations as SWAP or CNOT gates can be nicely represented in terms of curves transformations 
curves. The above-mentioned problems will be analyzed in future work. 

8. Conclusions 

It has relatively recently been realized that several different types of MUBs, with respect to 
their factorization properties, exist for a system of n qubits. Such bases are related to different 
arrangements of generalized Pauli monomials into sets of commuting operators. The construction 
of a whole set of MUBs is an involved problem, especially for large number of qubits. The 
simplest MUB construction was discovered by Wootters and it is related to straight lines in the 
discrete phase space. We have shown that all the other MUBs are connected with a special type 
of discrete curves. Although, in principle, we can classify all the possible additive commutative 
curves and even determine which are related through local transformations, arranging them in 
bundles of nonintersecting curves is still an involved problem. Nevertheless, we can find some 
of such bundles according to a "recipe" [specifically equations ( 14.5b and ( 14. 8H . which represents 
an essential progress in this field. 
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Appendix A. Galois fields 

In this appendix we briefly recall the minimum background needed in this paper. The reader 
interested in more mathematical details is referred, e.g., to the excellent monograph by Lidl and 
Niederreiter [69]. 
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A commutative ring is a set R equipped with two binary operations, called addition and mul- 
tiplication, such that it is an Abelian group with respect the addition, and the multiplication is 
associative. Perhaps, the motivating example is the ring of integers Z with the standard sum and 
multiplication. On the other hand, the simplest example of a finite ring is the set Z„ of integers 
modulo n, which has exactly n elements. 

A field F is a commutative ring with division, that is, such that does not equal 1 and all 
elements of F except have a multiplicative inverse (note that and 1 here stand for the identity 
elements for the addition and multiplication, respectively, which may differ from the familiar 
real numbers and 1). Elements of a field form Abelian groups with respect to addition and 
multiplication (in this latter case, the zero element is excluded). 

The characteristic of a finite field is the smallest integer p such that 

pl = l + l + ... + l = (A.l) 

p times 

and it is always a prime number. Any finite field contains a prime subfield Z p and has d = p n 
elements, where n is a natural number. Moreover, the finite field containing p n elements is unique 
and is called the Galois field GF(p n ). 

Let us denote as Z p [x] the ring of polynomials with coefficients in Z p . Let P(x) be an irre- 
ducible polynomial of degree n (i.e., one that cannot be factorized over Z p ). Then, the quotient 
space 7L V \X\I P{x) provides an adequate representation of GF(p"). Its elements can be writ- 
ten as polynomials that are defined modulo the irreducible polynomial P{x). The multiplicative 
group of GF(p n ) is cyclic and its generator is called a primitive element of the field. 

As a simple example of a nonprime field, we consider the polynomial x 2 + x + 1 = 0, which 
is irreducible in Z 2 . If a is a root of this polynomial, the elements {0, 1, er, a 2 = a + 1 = er -1 } 
form the finite field GF(2 2 ) and a is a primitive element. 

The map a i— > a p , where a G GF(p n ) is a linear automorphism of GF(p n ): (a + j3) n = 
a n + /3 n , and (a[3) n = a n /3 n . It is called the Frobenius automorphism and will be represented 
in the form 

e k (a)=a pk . (A.2) 

The elements of the prime field are invariant under action of the this automorphism. 
Another basic map is the trace 

n-l 

tr(a) = a + a 2 + . . . + = ^ 6 fe (a), (A.3) 

k=0 

which satisfies 

tr(a + 0) = tr(a) + tr(/3), (A.4) 
and also leaves the prime field invariant. In terms of it we define the additive characters as 
~2iri 



X(a) = cxp 



■ tr(a) 
P 



(A.5) 



and posses two important properties: 



X(<* + 0)=X(<*)X(P), E x(<*0)=P n So,fi. (A.6) 

a£GF(j)") 
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Any finite field GF(p n ) can be also considered as an n-dimensional linear vector space. Given 
a basis {9k}, (k = 1, . . . , n) in this vector space, any field element can be represented as 

n 

a = ^2a k 9 k , (A.7) 
k=i 

with at 6 Z p . In this way, we map each element of GF(p") onto an ordered set of natural 
numbers a <^> (oi, . . . , a n ). 

Two bases {#1, . . . , 8 n } and {9[, . . . , 9' n } are dual when 

tr(M0=5 fclJ . (A.8) 

A basis that is dual to itself is called selfdual. 

There are several natural bases in GF(p n ). One is the polynomial basis, defined as 

{l^a 2 ,...,^ 1 - 1 }, (A.9) 

where a is a primitive element. An alternative is the normal basis, constituted of 

{a,^,...,^"" 1 }. (A.10) 

The choice of the appropriate basis depends on the specific problem at hand. For example, in 
GF(2 2 ) the elements {a, a 2 } are both roots of the irreducible polynomial. The polynomial basis 
is {1, er} and its dual is {a 2 , 1}, while the normal basis {a, a 2 } is selfdual. 
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